1,673 to Zero: Mythos, Cal.diy App and Minimus Hardened Images

A really cool open source app was on Hacker News today: Cal.diy.

All you need to do these days to get something like Cal.diy to run is to tell Claude:

"Hi, here is an open source project, please compile and run it locally: https://github.com/calcom/cal.diy"

So I did, and it did run. I’m sure a lot of other people did too.

The Vulnerability Roulette

Now here is the part where Mythos comes in. You remember all this talk about Mythos?

I ran Grype on my environment to see how many vulnerabilities I have. Here are the results: essentially 3 images, 1,673 vulnerabilities.

• calcom/cal.diy: 31 Critical | 150 High | 289 Medium | 80 Low | 831 Negligible | Image Total: 1,565
• postgres: 8 Critical | 24 High | 39 Medium | 18 Low | 97 Negligible | Image Total: 186
• redis: 4 Critical | 9 High | 26 Medium | 14 Low | 50 Negligible | Image Total: 103

Grand Total: 1,673 vulnerabilities

Now with what you know about Mythos, do you really want to play roulette and try and see if someone is able to break into that system? Think about all the options that exist for breaking into this system. Checking all the potential attack vectors and figuring out if they are relevant for my scenario can be done today with a prompt.

The Minimus Solution

So what we do in Minimus is get you to the same end result, with the same open source, but this time it is fully patched, all the time.

Our platform provides continuously updated Base Images—what security teams call secure base images—and minimal container images built from source. This eliminates the unnecessary attack surface that leads to "CVE debt" before you even start building.

In my case, I just told Claude Code:

"OK, now compile the project using my minimus token xxxxxx and the minimus images."

After compiling the project using Minimus images, we ran the vulnerability scan again. The use of minimal containers ensured that no exploitable software remained. The results were conclusive:

• calcom/cal.diy: 0 Critical | 0 High | 0 Medium | 0 Low | 0 Negligible | Image Total: 0
• postgres: 0 Critical | 0 High | 0 Medium | 0 Low | 0 Negligible | Image Total: 0
• redis: 0 Critical | 0 High | 0 Medium | 0 Low | 0 Negligible | Image Total: 0

Grand Total: 0 vulnerabilities

Continuous, Measurable Security

This is how you deal with Mythos. By switching to Minimus, you move from playing vulnerability roulette to achieving continuous, measurable security for your container-based workloads. These pre-approved artifacts function as your golden images for secure deployment.

Ready to achieve Zero vulnerabilities for your next project? Schedule a demo to see the results in your environment.

That’s it. Zero my Hero :-)

‍